(19) 




Europaisches Patentamt 
European Patent Office 
.Office europeen des brevets 



(12) 



(43) Date of publication: 

29.10.1997 Bulletin 1997/44 

(21) Application number: 97302768.3 

(22) Date ot filing: 23.04.1997 



(id EP 0 803 810 A2 

EUROPEAN PATENT APPLICATION 

(51) intci.*: G06F 9/46, G06F 9/44 



(84) 


Designated Contracting States: 


• Bharat, Krishna 


DE FR GB 


Atlanta, Georgia 30309 (US) 






* Riggs, Waldo 


(30) 


Priority: 23.04.1996 US 636707 


Burlington, Massachusetts 01803 (US) 


(71) 


Applicant: SUN MICROSYSTEMS, INC. 


(74) Representative: Johnson, Terence Leslie 


Mountain View, CA 94043 (US) 


Edward Evans & Co. 






Chancery House 


(72) 


Inventors: 


53-64 Chancery Lane ^ 


• 


Waldo, James, H. 


London WC2A 1 SD (GB) 




Dracut, Massachusetts 01826 (US) 





(54) System and method for generating identifiers for uniquely identifying object types 



(57) A fingerprint generating system generates a fin- 
gerprint value for an object in an object-oriented pro- 
gramming arrangement. The object comprises a digital 
information stream and the fingerprint generating sys- 
tem generates a fixed-length fingerprint value from the 
digital information stream. The fingerprint generating 
system receives the digital information stream compris- 
ing the object and processes the digital information 
stream in accordance with a selected hash value gen- 
erating algorithm to generate a hash value which com- 
prises the fingerprint value. The hash value generating 
algorithm is selected from a class of hash value gener- 
ating algorjthms.characterized in that: 

i. in response t6 said input digital information 
stream, a digital hash value having a predetermined 
number of digital bits will be generated as an output: 

ii. the digital hash value will be a function' of the dig- 
ital information stream, so that 



identical digital hash values will be generated; 
but 

(b) given two input streams that are not identi- 
cal, it is extremely unlikely thatjdentical digital 
hash values will be generated: and 

iii. when the object, as a "referencing object," in- 
cludes a reference to another object, as a refer- 
enced object, the input digital information stream of 
the referencing object can include a fingerprint 
which had been previously generated for the refer- 
enced object, rather than a digital information 
stream for referenced object itself, 

the digital hash value generated according to the select- 
ed hash value generating algorithm comprising the fin- 
gerprint generated by said fingerprint generating sys- 
tem. 



(a) given two input streams that are identical. 
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Description 

The invention. -redirected generally to the field of 
systems and methods for use in a computer system or 
the like that processes programs designed according to 5 
object-oriented programming techniques and the like, 
and more particularly to the field of systems and meth- 
ods for generating an identifier for uniquely identifying 
types for objects that are to be used in processing of 
such programs. w 

In computer programs developed using object-ori- 
ented programming techniques, typically "objects" are 
developed which may be used in processing of a pro- 
gram. Typically, objects may comprise elements such 
as groups of data, such as arrays or the like, program '5 
code defining procedures and methods, and so forth. In 
one object-oriented computer programming language, 
namely, the Java™ programming language described 
in the aforementioned Java language specification, pro- 
grams define "classes' and "interfaces." Classes are 20 
used to define one or more methods or procedures, 
each of which may be invoked by reference to an inter- 
face. An interface provides a mechanism by which a set 
of methods may be declared, in particular identifying 
each method, types of arguments that are used in 25 
processing the method, the data type(s) of values that 
are returned by the method, and identifiers for excep- 
tions which may be generated during processing of the 
method. A class may declare the particular set of inter- 
faces that it implements, that is, the interfaces for whose 30 
methods it includes programming code. Alternatively, a 
class may indicate that it implements a particular inter- 
face which may be declared elsewhere. Different class- 
es may indicate that they implement the same interface, 
and each will have the program code which will be used 35 
in processing all of the methods which are declared in 
the interface. The program code that is provided in each 
of the classes may differ from the program code provid- 
ed in the other classes, but the program code for corre- 
sponding methods will provide the same results. 10 

When a Java program requires processing services 
which may be provided by a method that is maintained 
by a class, an instance of the class may be loaded into 
its execution environment, or it may invoke a remote ex- 
ecution of the method as described in the Wollrath, et j s 
al., patent application entitled "System and Method for 
Facilitating Dynamic Loading of "Stub" Information to 
Enable a Program Operating in One Address Space to 
Invoke Processing of a Remote Method or Procedure in 
Another Address Space", having the same priority date so 
as the present application. A copy of the Wollrath, et al.. 
patent application is filed herewith. In either case, the 
object will need to be loaded into the execution environ- 
ment, either the object comprising the class instance it- 
self, or, in the case of instances of classes that support ss 
remote interfaces, a stub class instance that enables the 
remote invocation of a method. These objects may have 
been (and in the case. of stub class instances, are likely 



to have been) generated separately from and independ- 
ently of the program which will be using them. When the 
program loads an object, it (the program) receives a 
stream of information which it will need to process to 
reconstruct the object and its various components, in- 
cluding, for example, the interfaces that are declared by 
the class as well as the program code which comprises 
the implementations of the class's respective methods. 
Typically, classes have identifiers such as object names, 
but those identifiers are typically assigned by program 
developers and thus may not be unique. Thus, two 
classes which have the same name may have very dif- 
ferent structures, and thus different methodologies will 
be needed to reconstruct the class. In addition, over time 
the structure of a class having a particular name may 
change, requiring changes to the methodologies need- 
ed to reconstruct the class. Accordingly, a program can- 
not necessarily rely on identifiers such as names pro- 
vided by program developers to determine which meth- 
odologies to be used in reconstructing the class. 

The invention provides a new and improved system 
and method for generating "fingerprint" identifiers for 
uniquely identifying types of objects, such as classes 
which are used in processing of object-oriented pro- 
grams and the like. The invention particularly provides 
a system and method for generating fingerprint identifi- 
ers which are generated using the actual structures and 
contents of the respective classes, so that classes which 
have different structures and contents will have different 
fingerprint identifiers. 

In brief summary, the invention provides a new fin- 
gerprint generating system, method and computer pro- 
gram product, for generating a fingerprint value for an 
object in an object-oriented programming arrangement. 
The object comprises a digital information stream and 
the fingerprint generating system generates a fixed- 
length fingerprint value from the digital information 
stream. The digital information stream comprising the 
object is processed in accordance with a selected hash 
value generating algorithm to generate a hash value 
which comprises the fingerprint value. The hash value 
generating algorithm is selected from a class of hash 
value generating algorithms characterized in that: 

i. in response to said input digital information 
stream, a digital hash value having a predetermined 
number of digital bits will be generated as an output; 

ii. the digital hash value will be a function of the dig- 
ital information stream, so that 

(a) given two input streams that are identical, 
identical digital hash values will be generated; 
but 

(b) given two input streams that are not identi- 
cal, it is extremely unlikely that identical digital - 
hash values will be generated: and 
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rii. when -trie -object as a "referencing object." in- 
cludes a reference to another object, as a refer- 
enced objectrthe; input digital information stream of 
the referencHng'object need only include a finger- 
print which had been previously generated for the 
referenced object, rather than a digital information 
stream for referenced object itself, 

the digital hash value generated according to the select- 
ed hash value generating algorithm comprising the fin- 
gerprint generated by said fingerprint generating sys- 
tem. 

This invention is pointed out with particularity in the 
appended claims. The above and further advantages 
ofthis invention may be better understood by referring 
to the following description taken in conjunction with the 
accompanying drawings, in which: 

FIG. 1 is a functional block diagram of a computer 
arrangement including an object type identification 
generating system constructed in accordance with 
the invention; 

FIG. 2 is a functional block diagram of the object 
verification system useful in the arrangement de- 
picted in FIG. 1 ; 

FIG. 3 is flow chart useful in understanding the op- 
erations of the object verification system depicted 
in FIG. 2. 

DETAILED DESCRIPTION OF AN ILLUSTRATIVE 
EMBODIMENT 

FIG. i is a functional block diagram of a computer 
arrangement 10 including an object type identification 
generating system constructed in accordance with the 
invention. With reference to FIG. 1 : computer network 
10 includes a plurality of computers 12(1 ) through 1 2(N) 
(generally identified by reference numeral 12(n)) inter- 
connected toy a communication link 14. As is conven- 
tional, at least some crt the computers I2(n) are in the 
form of personal computers or computer workstations, 
each ofwhich includes a system unit, a video display unit 
and operator input devices such as a keyboard and 
mouse. The computers I2(n) are of the conventional 
stored-program computer architecture. A system unit 
generally includes processing, memory, and mass stor- 
age devices such as disk and/or tape storage elements 
and other elements (not separately shown), including 
network interface devices I8(n) for interfacing the com- 
puter to the communication link 14. A video display unit 
permits the computer to display processed data and 
processing status to the user, and an operator input de- 
vice enables the user to input data and control process- 
ing by the computer. The computers I2(n) transfer in- 
formation, in the form of messages, through their re- 
spective network interlace devices l8(n), among each 



other over the communication link 1 4 

In one embodiment, the network 10 may be organ- 
ized in a "client-server" configuration. \n which various 
ones ofthe computers operate as clients and servers. In 
5 one aspect, server computers may, as "file servers, in- 
clude large-capacity mass storage devices which can 
store copies of programs and data which are available 
for retrieval by client computers over the communication 
link 14 for use in their processing operations. From time 
io to time, a client computer may also store data on the 
server computer, which may be later retrieved by it (that 
is, the client computer that stored the data) or other cli- 
ents for use in their processing operations. In addition, 
one or more of the server computers may, as "compute 
is servers," perform certain processing operations in re- 
sponse to a remote request therefor from a client, and 
return the results of the processing to the requesting cli- 
ent for use by it (that is, the requesting client computer) 
in its subsequent processing. In either case, the server 
20 computers may be generally similar to the client com- 
puters including a system unit, video display unit and 
operator input devices and may be usable by aTt oper- 
ator for data processing operations in a manner similar 
to a client computer, indeed, in such an arrangement, 
25 the J client/server" relationship may be considered to be 
relative, since computers which operate as servers, in 
that they perform storage and/or processing operations 
for other computers : may also operate as clients in re- 
questing storage and processing operations for other 
30 computers, including computers for which they operate 
as servers. Alternatively, some of the server computers 
may include only processing, memory,- mass storage 
and network interface elements for receiving and 
processing retrieval, storage or remote processing re- 
35 quests from the client computers, and generating re- 
sponses thereto. 

The communication link 14 interconnecting the cli- 
ent computers I2(n) in the network 10 may. as is con- 
ventional, comprise wires, optical fibers or other media 
^0 for carrying signals representing information among the 
computers I2(n). In addition, the communication link 
identified by reference numeral 1 4 may comprise a pub- 
lic network such as the public telephony system and/or 
the Internet, over which a person using a comouter 12 
^5 (n) may access information, including programs and da- 
ta, from a server computer 16 which may be located 
some distance from the client computer I2(n). As noted 
above, each of the computers I2(n) typically includes a 
network interface device (represented by respective ar- 
50 rows 18(n)~), which is appropriate to connect the respec- 
tive computer to the communications link 14. 

The invention provides a system for facilitating gen- 
eration of identifiers, termed herein "fingerprints," for 
uniquely identifying object "types" for objects that are 
55 used in processing of object-oriented programs and the 
like. The invention will be described in connection with 
programs provided in the Java™ programming lan- 
guage, as described in the Java language specification. 
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which are processed in connection with an execution 
environment which~~tsi: provided by a Java virtual ma- 
chine. The Java virtual- machine, in turn, is specified in 
the Java yirtual machine specification. By way of back- 
ground, as described in the Java language specification, 
programs in the Java programming language define 
"classes" and ■interlaces." Classes are used to define 
one-or more methods or procedures, each of which may 
be invoked by reference to an interlace. A class may be 
associated with and extend a "super-class," and in that 
regard will incorporate all of the interfaces and methods 
of the super-class, and may also include additional in- 
terfaces and/or methods. A class may also have one or 
more sub-classes (and thus will comprise a super-class 
of each of its sub-classes), with each subclass incorpo- 
rating and possibly extending their respective super- 
classes. A class may also reference other objects, in- 
cluding other interfaces and classes, which may be in- 
voked when the methods implemented by the class are 
processed. 

An interface provides a mechanism by which a set 
of methods may be declared. In that connection, an in- 
terface identifies each method that is declared by the 
interface by. for example, a method name, identifies the 
data types of arguments that are to be provided for the 
method, the data type(s) of return values that are to be 
returned by the method, and identifiers for exceptions 
which can be thrown during processing of the method. 
A class may itself declare the particular set of interfaces 
that it implements, or it may indicate that it implements 
a particular interface which may be declared elsewhere, 
and in either connection will include the program code 
which will be used in processing all of the methods which 
are declared in the interface. Different classes may in- 
dicate that they implement the same interface, and each 
will have the program code which will be used in 
processing all of the methods which are declared in the 
interface. The program code that is provided in each of 
the classes may differ from the program code provided 
in the other classes, fcut the program code for corre- 
sponding methods wilLprovide the same results. An in- 
terface may be declared independently of the particular 
class which implements the method or methods which 
can be invoked using the interface, and in that regard, 
a class that invokes the method and a class that actually 
implements the method will not need to share a common 
super-class. Thus, an interface provides a mechanism 
by which a set of methods can be declared without pro- 
viding an indication of the procedures which will be used 
in processing any of the methods. 

As indicated above, the invention provides a system 
for facilitating generation of fingerprints for uniquely 
identifying different objects that may be used in process- 
ing of object-oriented programs and the like. In pro- 
grams generated using the Java programming lan- 
guage, a variety of categories of program elements can 
comprise objects; of particular significance to the instant 
invention, classes which have been instantiated for use 



in processing can comprise objects, and the invention 
provides an arrangement which will generate a unique 
identifier, or "fingerprint." for each class which can be 
used by. for example, an execution environment in 
s which a Java program is being processed, to identify the 
object and facilitate the object's reconstruction when the 
object is loaded in the execution environment. A finger- 
print for the class's "type" may be used for a number of 
purposes. For example, the fingerprint may be used by 
io the program executing in the execution environment to 
identify the correct class to be used in processing, either 
to be, for example, retrieved from the same computer 
system or another computer system connected to the 
network 10 and loaded into the execution environment 
15 for local processing, or to be used in a invoking remote 
processing of a method maintained by a class in the 
same computer system or in another computer system 
connected to the network 10 as described in the 
Woltrath, et al.. patent application. 
20 in addition, the fingerprint may be used to assist in 
loading a class instance into the execution environment. 
Typically, when an object such as a class instance is 
loaded into an execution environment, the object is re- 
ceived as a stream of information, and the execution en- 
25 vironment will need to relate the various portions of the 
information stream to the various components of the 
class instance thereby to reconstruct the class instance 
from the information stream. The execution environ- 
ment will have available to it resources, such as pro- 
30 gramming code, which will enable it (that is the execu- 
tion environment) to receive the informatc earn and 
reconstruct the class instance. Since tr>; m ::ures of 
the various objects which may be so retrie- are likely 
to be unique, the execution environment will need to en- 
35 sure that it (that is. the execution environment) has the 
proper programming code to enable the object to be re- 
constructed when the information stream is received. As 
will be described below, according to the inventive sys- 
tem and method, the fingerprint is generated based on 
40 the structure and content of the actual object, and so the 
execution environment will be able to use the fingerprint 
of the object to associate the object being loaded with 
the programming code which can be used to reconstruct 
the object. Since the fingerprint is based on the object's 
structure, two objects which have different structures 
will likely have different fingerprints, even if other iden- 
tifiers which are associated with the objects, such as ob- 
ject names which may be provide by, for example, pro- 
gram developers, are the same. 
50 a further complication arises because a class, and 
hence its instantiation, may reference other "refer- 
enced" classes which contain methods which the refer- 
ring class may use in its processing. In that case, the 
fingerprint for the class will need to reflect not only the 
55 various components of the class itself, but also the ref- 
erenced classes which are referenced by the class. 

With this background, and with reference again to 
FIG. 1 , the invention provides a fingerprint generator 20 
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for use in connection with the one or more of the com- 
puters I2(n) which maintain or use the various objects 
22(m) to generate^a respective fingerprint 24(m) for 
each of the objects-: The fingerprint generator 20 can 
process each of the objects 22(m), in a manner which 5 
is described below in connection with FIGs. 2 and 3. to 
generate the fingerprint 24(m). The fingerprint 24(m) of 
the retrieved object represents a value which is used as 
a fingerprint to identify the "type" of the object, which 
may be used to identify the object 22(m) as being of type '0 
which is to be used by a program that is processed by 
the computer system 12(N) which maintains the object 
22(m), or as being of a type required by a program being 
processed by another computer system 12(1) through 
1 2(N-1 ). If the object 22(m) is of a type that is required '5 
by a program being processed by another computer 
system 1 2(1) through 1 2(N-1 ), the computer system 12 
(N) may either download the object 22(m) over the com- 
munication link 14 to the other computer system 12(1) 
through 1 2(N- 1 ) for use in its (that is, the other computer 20 
system's) processing, or it may perform processing of 
the object itself in a remote method invocation operation 
as described in the aforementioned Wollrath. et al., ap- 
plication. In any case, the fingerprint 24(m) will serve to 
uniquely identify the object's type, effectively ensuring 25 
that the object provides the method(s), input data type 
(s) and return data type(s) that are required by the pro- 
gram, and that the execution environment which loads 
the object can correctly reconstruct the object from the 
information stream that it receives when the object is 30 
received. 

As indicated above, the client computer I2(n) in- 
cludes a fingerprint generator 20, which will be de- 
scribed in connection with FIG. 2. for generating the fin- 
gerprint 24(m). With reference to FIG. 2. the verifier 20 35 
includes a object fingerprint value generator 31. an ob- 
ject fingerprint table 32. and an object store 34. The ob- 
ject store 34 receives the binary encoding of the object 
22(m) along with the cbject's fingerprint 23(m). The ob- 
ject fingerprint value generator 31 processes the con- 
tents of the obje"ct 22(m), and referenced objects (not 
shown in the FIGs.), as numerical digital data, to gener- 
ate an object fingerprint value. Referenced objects are 
objects which are referenced in the object in store 34. 
that is, the references to other classes which are refer- J 5 
enced in the class associated With the object in store 
34. In generating the object fingerprint value : if the ob- 
ject fingerprint value generator 31 has previously gen- 
erated an object fingerprint value fora referenced object 
and stored it in the object fingerprint table 32 t it (the ob- so 
ject fingerprint value generator 31) may use the previ- 
ously-generated object fingerprint information for the 
referenced object in generating the object fingerprint 
value for the object in the object store 34; otherwise, if 
another object is referenced by the object in store 34. 55 
the fingerprint generator 20 will need to generate a value 
for that other object in order to generate a fingerprint for 
the object currently in object store 34. 



a 

As described above, the object fingerprint value 
generator 31 processes the copy of the ob|ect 22(m) m 
the object store 34 to generate the object fingerprint val- 
ue which it provides to the comparator 33. In one par- 
ticular embodiment, the object fingerprint value gener- 
ator 31 processes the object 22(m) using a conventional 
secure hashing algorithm. Secure hashing algorithms 
useful with the object fingerprint value generator 31 
have characteristics such as: 

1 ) When the algorithm is performed, from a stream 
of digital information is received as an input, a fixed 
size digital value (that. is. a predetermined fixed 
number of data bits or bytes) is generated as an out- 
put: 

2) The digital output value is a function of the input 
information, so that 

(a) given two input streams that are identical, 
identical digital output values will be generated: 
but ^ 

(b) given two input streams that are not identi- 
cal, it is extremely unlikely that identicaj digital 
output values will be generated: 

3) it is extremely unlikely that the input stream can 
be reproduced from the digital output value: and 

4) when an object (as a "referencing object") in- 
cludes a reference to another object, the input 
stream for the referencing object need only include 
the fingerprint which had been previously generat- 
ed for the referenced object, rather than requiring 
the referenced object itself. 

These characteristics (particularly characteristics 2 
(a) and (b)) will ensure that, 

(a) if the fingerprints 23(m) generated by the finger- 
print generator 20 for two objects 22(m) have the 
same value, they will be of the same type, and pro- 
vide the same set of method(s). requiring the same 
input data type(s) and providing the same result(s) 
of the same data type(s), and can be reconstructed 
using the same reconstruction programming code; 
but 

(b) if the fingerprints 24(m) generated by the finger- 
print generator 20 for two objects 22(m) have differ- 
ent values, they will be of different types, and thus 
may not provide the same set of method(s), or may 
require differing input data type(s), or may result(s) 
with differing result data type(s), and in any case 
will likely have different structures. 

in which case a program may rely on the objects' finger- 
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prints to uniquely identify the object. Secure hashing al- 
gorithms such as the^NIST SHA available from the Na- 
tional Institute of Science and Technology: the RC4 and 
RC5 Secure Hash Algorithms available from RSA, Inc.. 
and the like, are illustrative of secure hashing algorithms 
which have these characteristics. 

Operations performed by the fingerprint generator 
20 generating the fingerprint will be described in con- 
nection with the flow chart in FIG. 3. Before proceeding 
further, however, it would be helpful to describe the 
structure of an object 22(m) which is processed by the 
fingerprint generator 20 to generate the object finger- 
print value. In one embodiment, an object 20 is in the 
form of, for example, an instantiated class provided in 
the Java programming language described in the Java 
language specification. The object 22(m) includes a plu- 
rality of sections, including a referenced object identifier 
section 40(m), an interfaces section 41 (m) ( a fields sec- 
tion 42(m) and a methods and procedures section 43 
(m). If the object 22(m) references other objects, the ref- 
erenced object identifier section 40(m) contains identi- 
fiers that identify the other objects, and provides indica- 
tors indicating how the other objects may be accessed. 
If the object does not reference another object, the ref- 
erenced object identifier section 40(m) may be empty. 

The methods and procedures section 43(m) pro- 
vides the particular methods, procedures, routines and 
the like (generally identified herein as "methods') which 
may be invoked through calls to the object. Methods 
which are provided in section 43(m) may make refer- 
ence to other objects, which are identified in the refer- 
enced object identifier section 40(m). The interfaces 
section 41 (m) effectively includes a listing ofthe object's 
interfaces, including, for example, names for the partic- 
ular methods identified in section 43(m) and parameters 
which are to be provided in a call to invoke a particular 
method. A program that is being processed by the client 
computer I2(n) may use the interface listing in section 
41 (m) to identify the particular methods which may be 
invoked througr>calls to the object 22(m). The fields sec- 
tion 42(m) provides S listing of, for example, variables 
and other elements which are used in the methods de- 
fined in section 43(m), and in addition may indicate 
whether the variables are, for example, private to the 
particular object 22(m) or a limited portion thereof, and 
the like. 

With this background, operations performed by the 
fingerprint generator 20 will be described in connection 
with the flow chart in FIG. 3. With reference to FIG. 3. 
the object fingerprint value generator 31 initially deter- 
mines whether the object fingerprint table 32 already 
has an object fingerprint value for the identified object 
(step 100). If the object fingerprint value generator 31 
makes a positive determination in step 100. it will use 
the object fingerprint value in its subsequent processing 
(step 101). 

On the other hand, if the object fingerprint value 
generator 31 makes a negative determination in step 



100. the object fingerprint table 32 does not already 
have an object fingerprint value for the identified object, 
and in that case it will proceed to step 102 to begin a 
procedure to generate an object fingerprint for ihe ob- 
5 ject. The object fingerprint value generator 31 generates 
the object fingerprint in a series of sequences, during 
each sequence using the secure hash algorithm to iter- 
* atively process the information contained in the four sec- 
tions 40(m) through 43(m) to generate the object finger- 
io print value for the object 22(m). 

Initially in that operation, if the referenced object 
identifier section 40(m) contains one or more referenced 
object identifiers, the object fingerprint value generator 
31 will process fingerprints for the referenced objects 
15 identified in the referenced object identifier section 40 
(m) in one or more iterations, in each iteration process- 
ing the fingerprint for one of the referenced objects. In 
each iteration, if a previously-generated object finger- 
print value is stored for the referenced object in the ob- 
20 ject fingerprint table 32. the object fingerprint value gen- 
erator 31 will use the fingerprint from the objectjinger- 
print table 32. On the other hand, if no previously-gen- 
erated object fingerprint value is stored for the refer- 
enced object in the object fingerprint table 32. the object 
25 fingerprint value generator 31 will attempt to generate 
an object fingerprint value for the referenced object, 
store the object fingerprint value in the object fingerprint 
table 32. and use it (the object fingerprint value for the 
referenced object) in generating the object fingerprint 
30 value for the object 22(m). 

More specifically, the object fingerprint value gen- 
erator 31 will determine whether the referenced object 
identifiers section 40(m) contains any referenced object 
identifiers (step 102) and if so will retrieve the list of ref- 
35 erenced object identifiers from the referenced object 
identifiers section 40(m) (step 103). The object finger- 
print value generator 31 will then place the list in sorted 
order according to a predetermined sorting scheme 
(step 104). The referenced object identifiers are sorted 
40 by the object fingerprint value generator 31 prior to using 
them in generating the object fingerprint value to ensure 
that they (the referenced object identifiers) will be in the 
same order to ensure that the same fingerprint value wilt 
be generated regardless of the point in time at which the 
45 fingerprint 24(m) is generated. 

After sorting the referenced object identifiers from 
section 40(m). the object fingerprint value generator 31 
will select the 'next* referenced object identifier in the 
sorted list (step 105) and will perform operations depict- 
so ed in FIG. 3 in connection with the referenced object as 
identified by the selected referenced object identifier.!© 
provide or generate an object fingerprint value for the 
referenced object. In the first iteration, the object finger- 
print value generator 31 will select the first referenced 
55 object identifier in the sorted list, and in subsequent it- 
erations (if any) it will select sequentially-listed refer- 
enced object identifiers in the sorted list. If the object - 
fingerprint table 32 does not have an object fingerprint 
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value for re te'reflced "object identified by selected refer- 
enced object identifier, and if the computer i2(n) does 
not have a copy of trie referenced object, it (the compu- 
ter) may need toietfieve the referenced object from an- 
other computer which maintains it (the referenced ob- 
ject). Alternatively; if the computer does not or is unable 
to retrieve a copy of the referenced object, the object 
fingerprint value generator 31 may exit. 

After generating or retrieving the object fingerprint 
value for the selected referenced object, the object fin- 
gerprint value generator 31 processes the object finger- 
print value in connection with secure hashing algorithm 
to generate an intermediate fingerprint value forlhe ob- 
ject 22(m) (step 106). Thereafter, the object fingerprint 
value generator 31 determines whether there are any 
additional referenced object identifiers in the sorted list 
(step 107). If the object fingerprint value generator 31 
makes a positive determination in step 107. the object 
fingerprint value generator 31 returns to step 104 to se- 
lect the next referenced object identifier and process the 
object fingerprint value of the identified thereby 

Returning to step 102, if the referenced object iden- 
tifiers section 40(m) is empty : the object fingerprint value 
generator 31 will make a negative determination in that 
step. In that case, or if the object fingerprint value gen- 
erator 31 makes a negative determination in step 107, 
it wilt sequence to a series of steps to process interface 
names which may be listed in the interfaces section 41 
(m). Initially, the object fingerprint value generator 31 will 
determine whether the interface names section 40(m) 
contains any interface names (step 110) and if so will 
retrieve the list of interface names from the interface 
names section 40(m) (step 111). The object fingerprint 
value generator 31 will then place the list in sorted order 
according to a predetermined sorting scheme (step 
1 1 2). The interface names are sorted by the object fin- 
gerprint value generator 31 prior to using them in gen- 
erating the object fingerprint value to ensure that they 
(the interface names) will be in the same order to ensure 
that the same fingerprint value wilt be generated regard- 
less of the-point-in time at which the fingerprint 24(m) is 
generated. f 

After sorting the.^nterface names from section 41 
(m), the object fingerprint value generator 31 will select 
the "next" interface name in the sorted list (step 113). In 
the first iteration, the object fingerprint value generator 
31 will select the first interface name in the' sorted list, 
and in subsequent iterations (if any) it will select sequen- 
tially-listed interface names in the sorted list. The object 
fingerprint value generator 31 processes the interface 
name in connection with the secure hashing algorithm 
to generate an updated intermediate fingerprint value 
for the object 22(m) (step 114). Thereafter, the object 
fingerprint value generator 31 determines whether there 
are any additional interface names in the sorted inter- 
face name list (step 115). If the object fingerprint value 
generator 31 makes a positive determination in step 
1 1 5. the object fingerprint value generator 31 returns to 



step 113 to select the next interface name and use it m 
connection with the secure hash algorithm. 

Returning to step 110, if the interface name section 
41 (m) is empty, the object fingerprint value generator 31 

5 will make a negative determination in that step. In that 
case, or if the object fingerprint value generator 31 
makes a negative determination in step 115. it will se- 
quence to a series of steps to process the variable 
names which may be listed in the fields section 42(m). 

10 Initially, the object fingerprint value generator 31 will de- 
termine whether the fields section 42(m) contains any 
variable names (step 120) and if so will retrieve the list 
of variable names from the fields section 42(m) (step 
121 ). The object fingerprint value generator 31 will then 

'5 place the list in sorted order according to a predeter- 
mined sorting scheme (step 122). The variable names 
are sorted by the object fingerprint value generator 31 
prior to using them in generating the object fingerprint 
value to ensure that they (the variable names) will be in 

20 the same order to ensure that the same fingerprint value 
will be generated regardless of the point in time at which 
the fingerprint 24(m) is generated. 

After sorting the variable names from fields section 
42(m), the object fingerprint value generator 31 will se- 

2S lect the "next" variable name in the sorted list (step 1 23). 
In the first iteration, the object fingerprint value genera- 
tor 31 will select the first variable name in the sorted list, 
and in subsequent iterations (if any) it will select sequen- 
tially-listed variable names in the sorted list. The object 

so fingerprint value generator 31 processes the variable 
name in connection with secure hashing algorithm to 
generate an updated intermediate fingerprint value for 
the object 22(m) (step 124). Thereafter, the object fin- 
gerprint value generator 31 determines whether there 

35 are any additional variable names in the sorted fields list 
(step 125). If the object fingerprint value generator 31 
makes a positive determination in step 125. the object 
fingerprint value generator 31 returns to step 1 23 to se- 
lect the next variable name and process it in connection 

•*o with the secure hash algorithm. 

Returning to step 120, if the fields section 42(m) is 
empty, the object fingerprint value generator 31 will 
make a negative determination in that step. In that case; 
or if the object fingerprint value generator 31 makes a 

-*5 negative determination in step 125. it will sequence to 
a series of steps to process the methods which may be 
listed in the methods and procedures section 43(m). In- 
itially, the object fingerprint value generator 31 will de- 
termine whether the methods and procedures section 

so 43(m) contains any methods (step 1 30) and if so will re- 
trieve the list of methods from the section 43(m) (step 
1 31 ). The object fingerprint value generator 31 will place 
the list in sorted order according to a predetermined 
sorting scheme, sorting using names of the respective 

55 methods (step 1 32). The methods are sorted by the ob- 
ject fingerprint value generator 31 prior to using them in 
generating the object fingerprint value to ensure that the *~ 
methods will be in the same order to ensure that the 
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same ftngerpant value'will be generated regardless of 
the point in time at which the fingerprint 24(m) is gener- 
ated if the ordering, of the methoas changes. 

After sorting iheTmethods from section 43(m). the 
object fingerprint value generator 31 will select the 
"next* method in the sorted list (step 133). In the first 
iteration, the object fingerprint value generator 31 will 
select the first method in the sorted list, and in subse- 
quent iterations (if any) it will select sequentially-listed 
methods in the sorted list. The object fingerprint value 
generator 31 process the selected method in connection 
with the secure hashing algorithm to generate an updat- 
ed intermediate fingerprint value for the object 22(m) 
(step 134). Thereafter, the object fingerprint value gen- 
erator 31 determines whether there are any additional 
methods in the sorted list (step 1 35). If the object finger- 
print value generator 31 makes a positive determination 
in step 1 35, the object fingerprint value generator 31 re- 
turns to step 1 23 to select the next method and process 
it in connection with the secure hash algorithm. 

Returning to step 130, if the methods and proce- 
dures section 42(m) is empty, the object fingerprint val- 
ue generator 31 will a negative determination in that 
step. (This may occur if, for example, the object declares 
an interface, rather than defining a class.) In that case, 
or if the object fingerprint value generator 31 makes a 
negative determination in step 135, it will have proc- 
essed the entire object 22(m) in connection with the se- 
cure hash algorithm, and so the updated intermediate 
fingerprint value will correspond to the object fingerprint 
value for the object 22(m). In that case, the object fin- 
gerprint value generator 31 will store the object finger- 
print value for the object 22(m) in the object fingerprint 
table 32 (step 140). 

The invention provides a number of advantages. In 
particular, the invention provides an arrangement which 
enables a client computer 1 2 to determine, with a high 
degree of probability, that an object, such as object 22 
(m). is of particular type and can be reconstructed used 
in its processing. The invention accomplishes this by 
providing for the object 22(m), a fingerprint value that 
may be used by a program to provide type information 
to identify objects which it may need in its processing. 
This can avoid the necessity of using other identifiers, 
such as object names, which generally need not be 
unique and in any case may remain the same even 
though the objects named thereby may change in a 
manner which may make them not usable by the pro- 
gram. 

It will be appreciated that a number of modifications 
may be made to the arrangement described above in 
connection with FIGs. 1 through 3. For example, al- 
though the arrangement has been described in connec- 
tion with a plurality of computer systems 1 2(n) intercon- 
nected by a network, it will be appreciated that the ar- 
rangement may be used in connection with a computer 
system to generate fingerprints for objects which may 
be distributed with programs on, for example, a compu- 



ter readable medium (such as a magnetic disk or CD- 
ROM) for processing on a single, stand-alone computer. 
In addition, although the arrangement has been de- 
scribed in connection with objects having the four sec- 

s tions 40(m) through 43(m) described above in connec- 
tion with FIG. 2. it will be appreciated that it may be used 
in connection with objects having different numbers of 
sections, and indeed different types of sections: of par- 
ticular significance is that the fingerprint be generated 

w so as to fairly uniquely identify the object's type, that is. 
the method(s), data type(s) of the input vartable(s) and 
the data type(s) of the output variable(s). 

It will be appreciated that a system in accordance 
with the invention can be constructed in whole or in part 

JS from special purpose hardware or a general purpose 
computer system, or any combination thereof, any por- 
tion of which may be controlled by a suitable program. 
Any program may in whole or in part comprise part of or 
be stored on the system in a conventional manner, or it 

20 may in whole or in part be provided in to the system over 
a network or other mechanism for transferring informa- 
tion in a conventional manner. In addition, it wilUje ap- 
preciated that the system may be operated and/or oth- 
erwise controlled by means of information provided by 

25 an operator using operator input elements (not shown) 
which may be connected directly to the system or which 
may transfer the information to the system over a net- 
work or other mechanism for transferring information in 
a conventional manner. 

30 The foregoing description has been limited to a spe- 
cific embodiment of this invention. It will be apparent, 
however, that various variations and modifications may 
be made to the invention, with the attainment of some 
or all of the advantages of the invention. It is the object 

55 of the appended claims to cover these and such other 
variations and modifications as come within the true 
spirit and scope of the invention. 

The processes described above may be performed 
by a computer program running on a computer in the 

40 embodiment described. Such a computer program can 
be recorded on a recording medium (for example a mag- 
netic disc or tape, an optical disc or an electronic mem- 
ory device, such as a ROM) in a way welt known to those 
skilled in the art. When the recording medium is read by 

45 a suitable reading device : such as a magnetic or optical 
disc drive, a signal is produced which causes a compu- 
ter to perform the processes described. 

The processes may also be performed by electronic 
means. 

so 

Claims 

1. A fingerprint generating system for use generating 
ss a fingerprint value for an object in an object-oriented 
programming arrangement, the object comprising a 
digital information stream, the fingerprint generat- 
ing system comprising: 
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A. a r.eceiverJor receiving the digital information 
stream comprising the object: 

B. an obi^ct fingerprint value generator for 
processing-Che digital information stream in ac- 
cordance, with a selected hash value generat- 
ing algorithm, the hash value generating algo- 
rithm being selected from a class of hash value 
generating algorithms characterized in that: 

i. in response to said input digital informa- 
tion stream, a digital hash value having a 

. predetermined number of digital bits will be 
generated as an output: 

ii. the digital hash value will be a function 
of the digital information stream, so that 



1 5 

2 in which said object fingerprint value generator 
processes the digital information stream m accord- 
ance with a selected hash value generating algo- 
rithm identified as an RC<i Secure Hash Algorithm 
available from RSA. Inc. 

5. A fingerprint generating system as defined in claim 
2 in which said object fingerprint value generator 
processes the digital information stream in accord- 
ance with a selected hash value generating algo- 
rithm identified as an RC5 Secure Hash Algorithm 
available from RSA. inc. 

6. A fingerprint generating system as defined in claim 
1 in which said object includes at least one refer- 
ence to a referenced object, the object fingerprint 
value generator including: 
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(a) given two input streams that are 
identical, identical digital hash values 20 
will be generated: but 

(b) given two input streams that are not 
identical, it is extremely unlikely that 
identical digital hash values will be 25 
generated; and 

iii. when the object, as a "referencing ob- 
ject, includes a reference to another object, 
as a referenced object, the object finger- 30 
print value generator can process the input 
digital information stream of the referenc- 
ing object including a referenced object fin- 
gerprint generated for the referenced ob- 
ject, rather than a digital information 2* 
stream associated with the referenced ob- 
. ject. 

the digital output value generated according to the 
selected hash value generating algorithm compris- 10 
ing the fingerprint generated by said fingerprint gen- 
erating system. 

A fingerprint generating system as defined in claim 

1 in which said hash value generating algorithm is 
selected from said class of hash value generating 
algorithms further characterized in that it is ex- 
tremely unlikely that the digital input stream can be 
reproduced from the digital output value. 

so 

A fingerprint generating system as defined in claim 

2 in which said object fingerprint value generator 
processes the digital information stream in accord- 
ance with a selected hash value generating algo- 
rithm identified as NIST SHA available from the Na- *s 
tional Institute of Science and Technology. 

A fingerprint generating system as defined in claim 



A. a referenced object fingerprint availability 
determination element for determining whether 
it has a referenced object fingerprint for said 
referenced object, and ^ ' 

B. a referenced object processing element re- 
sponsive to a positive determination by said ref 1 
erenced object fingerprint avaitability extermi- 
nation element for processing the referenced 
object fingerprint in accordance with the select- 
ed hash value generating algorithm 

7. A fingerprint generating system as defined in claim 

6 in which said object fingerprint value generator 
further includes a referenced object retrieval ele- 
ment for retrieving a referenced object digital infor- 
mation stream for said referenced ob|ect in re- 
sponse to a negative determination by said refer- 
enced object fingerprint availability determination 
element, said object fingerprint value generator 
processing the referenced object digital information 
stream in accordance with a said selected hash val- 
ue generating algorithm to generate said refer- 
enced object fingerprint. 

8. A fingerprint generating system as defined in claim 

7 in which the selected hash value generating algo- 
rithm used by said object fingerprint value generator 
to process the referenced object digital information 
stream comprises the same selected hash value 
generating algorithm used by the object fingerprint 
value generator to process the digital information 
stream. 

9. A fingerprint generating system as defined in claim 
6 in which said object includes a plurality of refer- 
ences each to respective ones of a plurality of ref- 
erenced objects, the object fingerprint value gener- 
ator further comprising a sort element for sorting 
said references according to a predetermined or- 
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dering, the referenced object fingerprint availability 
determination element and referenced object 
processing elenfent operating in a series of itera- 
tions in connection with the series of references in 
said- ordering. 

10. A fingerprint generating system as defined in claim 
1 in which said object comprises a plurality of ele- 
ments, the fingerprint generating system further in- 
cluding a sort element for sorting portions of the dig- 
ital information stream comprising the respective el- 
ements according to a selected sorted ordering to 
generate a sorted digital information stream, the ob- 
ject fingerprint value generator generating the dig- 
ital hash value from the sorted digital information 
stream. 



TO 
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11. A fingerprint generating system as defined in claim 
1 in which said object comprises a series of sec- 
tions, the object fingerprint value generator sequen- 20 
tiaily processing the respective sections in series. 



will be generated; but 

(b) given two input streams that are not 
identical, it is extremely unlikely that 
identical digital hash values will be 
generated: and 

iii. when the object, as a "referencing ob- 
ject." includes a reference to another ob- 
ject, as a referenced object, the object fin- 
gerprint value generator can process the 
input digital information stream of the ref- 
erencing object including a referenced ob- 
ject fingerprint generated for the refer- 
enced object, rather than a digital informa- 
tion stream associated with the referenced 
object. 

the digital output value generated according to the 
selected hash value generating algorithm compris- 
ing the fingerprint. ^ 



12. A fingerprint generating system as defined in claim 
1 1 in which each section further comprises a plural- 
ity of elements, the fingerprint generating system 25 
further including a sort element for sorting portions 

of the digital information stream within each section 
comprising the respective elements according to a 
selected sorted ordering to generate a sorted digital 
information stream, the object fingerprint value gen- 30 
erator generating the digital hash value from the 
sorted digital information stream. 

13. A fingerprint generating method for use generating 

a fingerprint value for an object in an object-oriented 3S 
programming arrangement, the object comprising a 
digital information stream, the fingerprint generat- 
ing method comprising the steps of: 

A. receiving the digital information stream com- -0 
prising the object; 

B. processing the digital information stream in 
accordance with a selected hash value gener- 
ating algorithm, the hash value generating al- 
gorithm being selected from a class of hash val- 
ue generating algorithms characterized in that: 

i. in response to said input digital informa- 
tion stream, a digital hash value having a 50 
predetermined number of digital bits will be 
generated as an output; 

ii. the digital hash value will be a function 

of the digital information stream, so that ss 

(a) given two input streams that are 
identical, identical digital hash values 



14. A signal for causing a computer to generate a fin- 
gerprint valve for an object in an object-orientated 
programming arrangement, the object comprising a 
digital information stream, the signal causing the 
computer to: 

A. receive the digital information stream com- 
prising the object; 

B. process of the digital information stream in 
accordance with a selected hash value gener- 
ating algorithm, the hash value generating al- 
gorithm being selected from a class of hash val- 
ue generating algorithms characterized in that; 

i. in response to said input digital informa- 
tion stream, a digital hash value having a 
predetermined number of digital bits will be 
generated as an output; 

ii. the digital hash value will be a function 
of the digital information stream, so that 

(a) given two input streams that are 
identical, identical digital hash values 
will be generated; but 

(b) given two input streams that are not 
identical, it is extremely unlikely that 
identical digital hash values will be 
generated; and 

iii. when the object, as a "referencing ob- 
ject, includes a reference to another object, 
as a referenced object, the object finger- *- 
print value generator can process the input 
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digital information stream of the referenc- 
ing object including a referenced object fin- 
gerprint generated for the referenced ob- 
ject." rather than a digital information 
stream associated with the referenced ob- * 
ject. 

the Gigital output vaiue generated according to the 
selected hash value generating algorithm compris- 
ing the fingerprint. JO 

A method of obtaining data on a recording medium, 
the method comprising storing data representative 
of a signal, which signal causes a computer to gen- 
erate a fingerprint value for an object in an object- is 
oriented programming arrangement, the object 
comprising a digital information stream, the signal 
causing the computer to: 

A. receive the digital information stream com- 20 
prising the object: 

3. process the digital information stream in ac- 
cordance with a selected hash value generat- 
ing algorithm, the hash value generating algo- 25 
nthm being selected from a class of hash value 
generating algorithms characterized in that: 

i. in response to said input digital informa- 
tion stream, a digital hash value having a 30 
predetermined number of digital bits will be 
generated as an output: 

ii. the digital hash value will be a function 

of the digital information stream, so that 35 

(a) given two input streams that are 
identical, identical digital hash values 
will be generated: but 

-0 

(b) g^ven two input streams that are not 
identical, it is extremely unlikely that 
identical digital hash values will be 
generated: and 

45 

iii. when the object, as a 'referencing ob- 
ject/ includes a reference to another ob- 
ject, as a referenced object, the object fin- 
gerprint value generator can process the 
input digital information stream of the ref- so 
erencing object including a referenced ob- 
ject fingerprint generated for the refer- 
enced object, rather than a digital informa- 
tion stream associated with the referenced 
object, ss 

the digital output value generated according to 
the selected hash value generating algorithm 
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comprising the fingerprint. 

16. A method as defined in claim 1 3 or 15. or a signal 
as defined in claim 1 4 in which said hash value gen- 
erating algorithm is selected from said class of hash 
value generating algorithms further characterized in 
that it is extremely unlikely that the digital input 
stream can be reproduced from the digital output 
value. 

17. A method or signal as defined in claim 16 in which, 
during said object fingerprint value generating step 
the digital information stream is processed in ac- 
cordance with a selected hash value generating al- 
gorithm identified as NIST SHA available from the 
National Institute of Science and Technology. 

1 8. A method or signal as defined in claim 1 6 in which, 
during said object fingerprint value generating step, 
the digital information stream is processed in ac- 
cordance with a selected hash value generating al- 
gorithm identified as an RC4 Secure Hash Algo- 
rithm available from RSA ; Inc. 

1 9. A fingerprint generating method or signal as defined" 
in claim 16 in which, during said object fingerprint 
value generating step, the digital information 
stream is processed in accordance with a selected 
hash value generating algorithm identified as an 
RC5 Secure Hash Algorithm available from RSA. 
Inc. 

20. A method as defined in claim 13 or 15. or a signal 
as defined in claim 1 4 in which said object includes 
at least one reference to a referenced object, the 
object fingerprint value generating step including 
the steps of: 

A. determining whether a referenced object fin- 
gerprint is provided for said referenced object, 
and 

B. responsive to a positive determination during ' 
said referenced object fingerprint availability 
determination step, processing the referenced 
object fingerprint in accordance with the select- 
ed hash value generating algorithm. 

21. A method or signal as defined in claim 20 in which 
said object fingerprint value generation step further 
includes the step of retrieving a referenced object 
digital information stream for said referenced object 
in response to a negative determination by said ref- 
erenced object fingerprint availability determination 
element, and processing the referenced object in- 
formation stream in accordance with a said selected 
hash value generating algorithm to generate said 
referenced object fingerprint. 
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22. A method or signal as defined in claim 21 in which, 
during the selected hash value generating step, the 
same selected hash value generating algorithm is 
used to process the referenced object digital infor- 
mation stream as is used to process the digital in- s 
formation stream. 

23. A method or signal as defined in claim 20 in which 
said object includes a plurality of references each 

to respective ones of a plurality of referenced ob- io 
jects, the object fingerprint value generation step 
further comprising the step of sorting said referenc- 
es according to a predetermined ordering, the ref- 
erenced object fingerprint availability determination 
step and referenced object processing step being '5 
performed in a series of iterations in connection with 
the series of references in said ordering. 

24. A method as defined in claim 13 or 15, or a signal 

as defined in claim 1 4 in which said object compris- 20 
es a plurality of elements, the fingerprint generating 
method further including the step of sorting portions 
of the digital information stream comprising the re- 
spective elements according to a selected sorted 
ordering to generate a sorted digital information 25 
stream, the digital hash value being generated from 
the sorted digital information stream. 

25. A method as defined in claim 13 or 15, or a signal 

as defined in claim 1 4 in which said object compris- 30 
es a series of sections, the object fingerprint value 
generation step including the step of sequentially 
processing the respective sections in series. 

26. A method or signal as defined in claim 25 in which 35 
each section further comprises a plurality of ele- 
ments, the fingerprint generating method further in- 
cluding the step of sorting portions of the digital in- 
formation stream within each section comprising 

the respective elements according to a selected -*o 
sorted ordering to generate a sorted digital informa- 
tion stream, the digital hash value being generated 
from the sorted digital information stream. 

27. A fingerprint generating computer program product 4 S 
for use in controlling a computer to generate a fin- 
gerprint value for an object in an object-oriented 
programming arrangement, the object comprising a 
digital information stream, the fingerprint generat- 
ing computer program product comprising a ma- 50 
chine-readable medium having encoded thereon: 

A. receiver code devices for enabling said com- 
puter to receive the digital information stream 
comprising the object: 55 

B. object fingerprint value generator code de- 
vices for enabling said computer to process the 



digital information stream in accordance with a 
selected hash value generating algorithm, the 
hash value generating algorithm being selected 
from a class of hash value generating algo- 
rithms characterized in that: 

i. in response to said input digital informa- 
tion stream, a digital hash value having a 
predetermined number of digital bits will be 
generated as an output; 

ii. the digital hash value will be a function 
of the digital information stream, so that 

(a) given two input streams that are 
identical, identical digital hash values 
will be generated: but 

(b) given two input streams that are not 
identical, it is extremely unlikely that 
identical digital hash values "will be 
generated: and 

hi. when the object, as a "referencing ob- 
ject,* includes a reference to another ob*- 
ject, as a referenced object, the object fin- 
gerprint value generator can process the 
input digital information stream of the ref- 
erencing object including a referenced ob- 
ject fingerprint generated for the refer- 
enced object, rather than a digital informa- 
tion stream associated with the referenced 
object. 

the digital output value generated according to 
the selected hash value generating algorithm 
comprising the fingerprint generated by said 
fingerprint generating system. 

28. A fingerprint generating computer program product 
as defined in claim 27 in which said hash value gen- 
erating system is selected from said class of hash 
value generating algorithms further characterized in 
that it is extremely unlikely that the digital input 
stream can be reproduced from the digital output 
value. 

29. A fingerprint generating computer program product 
as defined in claim 28 in which said object finger- 
print value generator code devices enable said 
computer to process the digital information stream 
in accordance with a selected hash value generat- 
ing algorithm identified as NIST SHA available from 
the National Institute of Science and Technology. 

30. A fingerprint generating computer program product 
as defined in claim 28 in which said object finger- - 
print value generator code devices enable said 
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computer to process the digital information stream 
in accordance^ with a selected hash value generat- 
ing algorithm. identified as an RC4 Secure Hash Al- 
gorithms available from R5A, Inc. 

31 . A fingerprint generating computer program product 
as defined in claim 29 in which said object finger- 
print value generator code devices enable said 
computer to process the digital information stream 
in accordance with a selected hash value generat- 
ing algorithm identified as an RC5 Secure Hash Al- 
gorithms available from RSA. Inc. 

32. A fingerprint generating computer program product 
as defined in claim 27 in which said object includes 
at least one reference to a referenced object, the 
object fingerprint value generator code devices in- 
cluding: 

A. referenced object fingerprint availability de- 
termination code devices for enabling said 
computer to determine whether it has a refer- 
enced object fingerprint for said referenced ob- 
ject, and 

B. referenced object processing code devices 
for enabling said computer responsive to a 
positive determination by said referenced ob- 
ject fingerprint availability determination ele- 
ment, to process the referenced object finger- 
print in accordance with the. selected hash val- 
ue generating algorithm. 



35. A fingerprint generating computer program product 
as defined in claim 32 in which said object includes 
a plurality of references each to respective ones of 
a plurality of referenced objects, the object finger- 

s print value generator code devices further compris- 

ing a sort element for enabling said computer to sort 
said references according to a predetermined or- 
dering, the referenced object fingerprint availability 
determination code devices and referenced object 

10 processing code devices controlling said computer 
to operate in a series of iterations in connection with 
the series of references in said ordering. 

36. A fingerprint generating computer program product 
'5 as defined in claim 27 in which said object compris- 
es a plurality of elements, the fingerprint generating 
computer program product further including sort 
code devices for enabling the computer to sort por- 
tions of the digital information stream comprising 

20 the respective elements according to a selected 
sorted ordering to generate a sorted digital informa- 
tion stream, the object fingerprint value generator 
code devices enabling aid computer to generate the 
digital hash value from the sorted digital information 

25 stream. k ' 

37. A fingerprint generating computer program product 
as defined in claim 27 in which said object compris- 
es a series of sections, the object fingerprint value 

30 generator code devices enabling said computer to 
sequentially process the respective sections in se- 
ries. 



33. A fingerprint generating computer program product 
as defined in claim 32 in which said object finger- 
print value generator code devices further include 
referenced object retrieval code devices for ena- 
bling said computer to retrieve a referenced object 
digital information stream for said referenced object 
in response .to a negative determination during 
processing of saffd referenced object fingerprint 
availability determination code devices, said object 
fingerprint value generator code devices process- 
ing the referenced object digital information stream 
in accordance with a said selected hash value gen- 
erating algorithm to generate said referenced object 
fingerprint. 

34. A fingerprint generating computer program product 
as defined in claim 33 in which the selected hash 
value generating algorithm used by during process- 
ing of said object fingerprint value generator code 
devices to process the referenced object digital in- 
formation ■ stream comprises the same selected 
hash value generating algorithm used during 
processing ofthe object fingerprint value generator 
code devices to process the digital information 
stream. 



38- A fingerprint generating computer program product 
35 as defined in claim 37 in which each section further 
comprises a plurality of elements, the fingerprint 
generating computer program product further in- 
cluding sort code devices for enabling said compu- 
ter to sort portions of the. digital information stream 
within each section comprising the respective ele- 
ments according to a selected sorted ordering to 
generate a sorted digital information stream, the ob- 
ject fingerprint value generator code devices ena- 
bling the computer to generate the digital hash val- 
■15 ue from the sorted digital information stream: 

39. A fingerprint generating system for use generating 
a fingerprint value for an object in an object-oriented 
programming arrangement, the object comprising a 
50 digital information stream, the fingerprint generat- 
ing system comprising: 

A. a computer; and 

55 8. a control arrangement for controlling said 

computer the control arrangement comprising: 

i. a receiver module for enabling said com- 
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puter to receive the digital information 
stream comprising the object: 

ii. an object fingerprint value generation 
module for enabling said computer to proc- $ 
esses the digital information stream in ac- 
cordance with a selected hash value gen- 
erating algorithm, the hash value generat- 
ing algorithm being selected from a class 
of hash value generating algorithms char- to 
acterized in that: 

a. in response to said input digital in- 
formation stream, a digital hash value 
having a predetermined number of dig- 15 
ital bits will be generated as an output; 

b. the digital hash value will be a func- 
tion ofthe digital information stream, so 
that 20 

(I) given two input streams that are 
identical, identical digital hash val- 
ues will be generated: but 

25 

(II) given two input streams that 
are not identical, it is extremely un- 
likely that identical digital hash 
values will be generated; and 

30 

* c. when the object, as a 'referencing 
object, "includes a reference to anoth- 
er object, as a referenced object, the 
object fingerprint value generator can 
process the input digital information 3S 
stream of the referencing object in- 
cluding a referenced object fingerprint 
generated for the referenced object, 
rather than a digital information stream 
associated with the referenced object. 4 o 

the digital output value generated according to 
the selected'hash value generating algorithm 
comprising the fingerprint generated by said 
fingerprint generating system. 45 

40. A control arrangement for use in connection with a 
computer to facilitate generation of a fingerprint val- 
ue for an object in an object-oriented programming 
arrangement, the object comprising a digital infor- so 
mation stream, the control arrangement compris- 
ing: 

A. a receiver module for enabling said compu- 
ter to receive the digital information stream ss 
comprising the object: 

B. an object fingerprint value generation mod- 



ule for enabling said computer to processes the 
digital information stream in accordance with a 
selected hash value generating algorithm, the 
hash value generating algorithm being selected 
from a class of hash value generating algo- 
rithms characterized in that: 

i. in response to said input digital informa- 
tion stream, a digital hash value having a 
predetermined number of digital bits will be 
generated as an output; 

ii. the digital hash value will be a function 
of the digital information stream, so that 

(a) given two input streams that are 
identical, identical digital hash values 
will be generated: but 

(b) given two input streams that are not 
identical, it is extremely unlikely that 
identical digital hash values will be 
generated: and 

ii. when the object, as a "referencing ob- 
ject," includes a reference to another ob- 
ject, as a referenced object, the object fin- 
gerprint value generator can process the 
input digital information stream of the ref- 
erencing object including a referenced ob- 
ject fingerprint generated for the refer- 
enced object, rather than a digital informa- 
tion stream associated with the referenced 
object, 

the digital output value generated according to the 
selected hash value generating algorithm compris- 
ing the fingerprint generated by said fingerprint gen- 
erating system. 

41 . A system for distributing code stored on a computer 
readable medium and executable by a computer, 
the code including a plurality of modules each con- 
figured to controi the computer to facilitate genera- 
tion of a fingerprint value for an object in an object- 
oriented programming arrangement, the object 
comprising a digital information stream, the system 
comprising: 

A. a receiver module for enabling said compu- 
ter to receive the digital information stream 
comprising the object: 

B. an object fingerprint value generation mod- 
ule for enabling said computer to processes the 
digital information stream in accordance with a 
selected hash value generating algorithm, the 
hash value generating algorithm being selected 



15 



27 



EP 0 803 810 A2 



from a class of hash value generating algo- 
rithms characterized in that: 

i- in response to said input digital informa- 
tion stream, a digital hash value having a ^ 
predetermined number of digital bits wiil be 
generated as an output: 

ii. the digital hash value will be a function 

of the digital information stream, so that *o 

(a) given two input streams that are - 
identical, identical digital hasft values 
will be generated; but 

is 

(b) given two input streams that are not 
identical, it is extremely unlikely that 
identical digital hash values will be 
generated: and 

20 

ii when the object, as a "referencing object. 
" includes a reference to another object, as 
a referenced object, the object fingerprint 
value generator can process the input dig- 
ital information stream of the referencing 25 
object including a referenced object finger- 
print generated for the referenced object, 
rather than a digital information stream as- 
sociated with the referenced object, 

30 

the. digital output value generated according to the 
selected hash value generating algorithm compris- 
ing the fingerprint generated by said fingerprint gen- 
erating system. 

35 

42. A signal according to any one of claims 1 4 or 1 6 to 
26. wherein the signal is recorded on a recording 
medium. 

43. A signal according to claim 42, wherein the record- -*o 
ing medium comprises a magnetic disc, a magnetic 
tape t an optical disc or an electronic memory de- 
vice. 

45 
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100V DETERMINE WHETHER OBJECT 
FINGERPRINT TABLE HAS AN OBJECT 
FINGERPRINT VALUE FOR OBJECT 22(M) 



fig: 3 



NO 



YES 



1 



101. USE RETRIEVED OBJECT FINGERPRINT 
VALUE IN SUBSEQUENT OPERATIONS 



NO 



^102. DETERMINE WHETHER REFERENCED 
OBJECT IDENTIFIERS SECTION 40(M) OF 
OBJECT 22(M) HS ANY REFERENCED OBJECT 
IDENTIFIERS 



YES 



103. RETRIEVE REFERENCED OBJECT 
IDENTIFIERS FROM REFERENCED OBJECT 
IDENTIFIER SECTION 



104. SORT REFERENCED OBJECT IDENTIFIERS 
FROM REFERENCED OBJECT IDENTIFIER 
SECTION 



105. SELECT NEXT REFERENCED OBJECT 
IDENTIFIER FROM SORTED LIST 



0 



0 



0 



19 



EP 0 803 810 A2 



2 



106. PROCESS SELECTED REFERENCED 
OBJECT IDENTIFIER USING SECURE HASHING 
ALGORITHM TO GENERATE UPDATED 
INTERMEDIATE FINGERPRINT VALUE FOR 
OBJECT 22(M) 



YES 



1 07. DETERMINE WHETHER THERE ARE ANY 
ADDITIONAL REFERENCED OBJECT 
IDENTIFIERS IN SORTED UST 



NO 

I 

_2L 



110. DETERMINE WHETHER INTERFACE NAMES 
SECTION 41{M) CONTAINS ANY INTERFACE 
NAMES 



NO 



YES 



111. RETRIEVE LIST OF INTERFACE NAMES 
FROM INTERFACE NAMES SECTION 



112. SORT INTERFACE NAMES FROM 
INTERFACE NAMES-SECTION 



6 



6 



FIG.3 rCONT.A) 
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Q FIG. 3 (CONT. B) 

o 



113. SELECT NEXT INTERFACE NAME FROM 
SORTED LIST 



>i 



114. PROCESS SELECTED INTERFACE NAME 
USING SECURE HASHING ALGORITHM TO 
GENERATE UPDATED INTERMEDIATE 
FINGERPRINT VALUE FOR OBJECT 22(M) 



YES 



115. DETERMINE WHETHER SORTED INTERFACE 
NAME LIST CONTAINS AN ADDITIONAL 
INTERFACE NAME 



NO 



120. DETERMINE WHETHER FIELDS SECTION 
42(M)^ONTAINS ANY VARIABLE NAMES 



YES 
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0 



FIG, 3 (CONT. C) 



121. RETRIEVE LIST OF \ 
FIELDS SECTION 42(M) • 


/ARIABLE NAMES FROM 




r 


r 

122. SORT LIST OF VAR 


IABLE NAMES j 



r 






123. SELECT NEXT VARIABLE NAME FROM 




SORTED LIST 














r 



124. PROCESS SELECTED VARIABLE NAME 
USING SECURE HASHING ALGORITHM TO 
GENERATE UPDATED INTERMEDIATE 
FINGERPRINT VALUE FOR OBJECT 22(M) 



YES 



125. DETERMINE WHETHER SORTED VARIABLE 
NAME LIST CONTAINS AN ADDITIONAL 
VARIABLE NAME 
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Q FIG. 3 rCONT. D) 



130. DETERMINE WHETHER THERE ARE ANY 
METHOD IDENTIFIERS IN METHODS AND 
PROCEDURES SECTION 43(M) 



] 



YES 



131. RETRIEVE LIST OF METHODS FROM 
METHODS AND PROCEDURES SECTION 43(M) 



132. SORT LIST OF METHODS FROM METHODS 
AND PROCEDURES SECTION 43(M) 



133. SELECT NEXT METHOD FROM SORTED 
LIST 



6 



6 
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Q 



0 



134. PROCESS SELECTED METHOD USING 
SECURE HASHING ALGORITHM TO GENERATE 
UPDATED INTERMEDIATE FINGERPRINT VALUE 
FOR OBJECT 22(M) 



135. DETERMINE WHETHER SORTED LIST 
CONTAINS AN ADDITIONAL METHOD 



~X YES 



NO 



140. PROVIDE UPDATED OBJECT FINGERPRINT 
VALUE AS OBJECT FINGERPRINT VALUE IN 
OBJECT FINGERPRINT FIELD 24(M) 



FIG. 3 (CONT. E) 



24 



